Knowledge

Payment Services Directive

Source 📝

154:
UK, the FCA published PS 21/19 (“policy statement”) for “Changes to the SCA-RTS and to the guidance in ‘Payment Services and Electronic Money – Our Approach’ and the Perimeter Guidance Manual” . This document proposed a number of modifications including to Article 10 of the UK- RTS, by replacing the requirement for the PSU to re-authenticate with their ASPSP every 90 days to allow AISP access with the requirement for the PSU to reconfirm their consent with their AISP directly.
312: 173:
services" offer consolidated information on different accounts of a payments service user. Harmonisation of refund rules regarding direct debits, a reduction of the scope of the "simplified regime" for so-called "small payment institutions" and addressing security, access to information on payment accounts or data privacy with possible licensing and supervision were proposed.
150:
benefits have not yet been fully realised". The same report found the 2009 update "to be functioning well. For example, charges for €100 transfers followed a further downward trend to €0.50 euro-area average for transfers initiated online and remained low, at €3.10 for transfers initiated at the bank counter".
107:
The PSD's purpose in regard to the payments industry was to increase pan-European competition with participation also from non-banks, and to provide for a level playing field by harmonizing consumer protection and the rights and obligations for payment providers and users. The PSD's purpose in regard
216:
Another important element of the directive is the demand for common and secure communication (CSC). eIDAS-defined qualified certificates for are demanded for website authentication and electronic seals used for communication between financial services players. The technical specification ETSI TS 119
182:
On 8 October 2015, the European Parliament adopted the European Commission proposal to create safer and more innovative European payments (PSD2, Directive (EU) 2015/2366). The current rules aim to better protect consumers when they pay online, promote the development and use of innovative online and
153:
In October 2021 the EBA launched a public consultation on the amendment of its Regulatory Technical Standards (RTS) on strong customer authentication and secure communication (SCA&CSC) under the Payment Services Directive (PSD2) with regard to 90-day exemption from SCA for account access. In the
136:
The "business conduct rules" specified what transparency of information payment service institutions needed to provide, including any charges, exchange rates, transaction references and maximum execution time. It stipulated the rights and obligations for both payment service providers and users, how
149:
The PSD was updated in 2009 (EC Regulation 924/2009) and 2012 (EU Regulation 260/2012). An implementation report from 2013 found the PSD facilitated "provision of uniform payment services across the EU" and reduced legal and production costs for many payment service providers and that "the expected
205:
The EU and many banks pushed this development with the new Payments Service Directive 2 (PSD2), which came into force on 13 January 2018. Banks then adapted to these changes which opened many technical challenges, but also many strategic opportunities, such as collaborating with fintech providers,
201:
passed PSD2. Member states then had two years to incorporate the directive into their national laws and regulations. On 27 November 2017, Commission delegated Regulation (EU) 2018/389 supplemented PSD2 with regard to regulatory technical standards for strong customer authentication and common and
172:
So-called "third party payment service providers" emerged, which facilitated online shopping by offering low cost payments on the Internet by using the customers' home online banking application with their agreement, and informing merchants that the money is on its way. Other "account information
132:
in 2000, and created the new category of "payment institutions" (PI) with its own prudential regime rules. Organisations that are neither credit institutions nor EMIs could apply for an authorisation as a payment institution if they met certain capital and risk management requirements. The
405:
Directive (EU) 2015/2366 of the European Parliament and of the Council of 25 November 2015 on payment services in the internal market, amending Directives 2002/65/EC, 2009/110/EC and 2013/36/EU and Regulation (EU) No 1093/2010, and repealing Directive 2007/64/EC (Text with EEA
127:
The "market rules" described which type of organisations could provide payment services. Next to credit institutions (i.e. banks) and certain authorities (e.g. central banks, government bodies), the PSD mentioned electronic money institutions (EMI), created by the
647:"Report from the Commission to the European Parliament and the Council on the application of Directive 2007/64/EC on payment services in the internal market and on Regulation (EC) No 924/2009 on cross-border payments in the Community" 431:"Directive 2007/64/EC of the European Parliament and of the Council of 13 November 2007 on payment services in the internal market amending Directives 97/7/EC, 2002/65/EC, 2005/60/EC and 2006/48/EC and repealing Directive 97/5/EC" 194:, responsible for Financial Stability, Financial Services and Capital Markets Union, said, "This legislation is a step towards a digital single market; it will benefit consumers and businesses, and help the economy grow." 63:
and the rights and obligations of payment providers and users. The key objectives of the PSD2 directive are creating a more integrated European payments market, making payments more secure and protecting consumers.
108:
to consumers was to increase customer rights, guarantee faster payments (no later than next day since 1 January 2012), describe refund rights, and give clearer information on payments. Although the PSD was a
44: 133:
application could be made in any EU country where they are established and they could then "passport" their payment services into all other EU member states without additional PI requirements.
141:
Each country had to designate a "competent authority" for prudential supervision of the PIs and to monitor compliance with business conduct rules, as transposed into national legislation.
59:(EEA). The PSD's purpose was to increase pan-European competition and participation in the payments industry also from non-banks, and to provide for a level playing field by harmonizing 605: 701: 646: 697: 291:
14 September 2019: The final deadline for all companies within the EU to comply with PSD2's Regulatory Technical Standard (RTS) pertaining to directive (EU) 2015/2366 (PSD2)
669:"EBA consults on the amendment to its technical standards on strong customer authentication and secure communication in relation to the 90-day exemption for account access" 576: 137:
to authorise and execute transactions, liability in case of unauthorised use of payment instruments, refunds on payments, payment orders, and value dating of payments.
282:
16 November 2015: The Council of the European Union passes PSD2, giving member states two years to incorporate the directive into their national laws and regulations.
364:
elements of the new legislation, claiming it focuses too much on improving competition and innovation while the privacy interests of account holders are overlooked.
506: 169:
The PSD option for merchants to charge a fee or give a rebate, combined with the option for countries to limit this, led to "extreme heterogeneity in the market".
115:
The final adopted text of PSD went into force 25 December 2007 and was transposed into national legislation by all EU and EEA member states by 1 November 2009.
864: 933: 668: 984: 882: 948: 841: 910:
Dimitrios Linardatos: "Das Haftungssystem im bargeldlosen Zahlungsverkehr nach Umsetzung der Zahlungsdiensterichtlinie", Nomos-Verlag, 2013,
616: 542: 322: 795: 288:
14 March 2019: All Financial Institutions offering an API solution must have it available for external testing by PISPs and AISPs.
755: 964: 915: 191: 294:
31 December 2020: Extended deadline for all companies within the EU to implement PSD2's Strong Customer Authentication (SCA)
820: 781: 979: 517: 163:
The PSD only applied to payments within the European Economic Area, but not to transactions to or from third countries.
273:
2009 update: eliminated differences in charges for cross-border and national payments in euro (EC Regulation 924/2009)
347: 104:
chip cards/terminals). The PSD provides the legal framework within which all payment service providers must operate.
93: 943: 403: 727:"European Parliament adopts European Commission proposal to create safer and more innovative European payments" 459: 225: 210: 80:, which defines the harmonization of payment products, infrastructures and technical standards (Rulebooks for 481: 198: 698:"PS21/19: Changes to the SCA-RTS and to guidance in the Approach Document and the Perimeter Guidance Manual" 974: 276:
2012 update: Regulation on cross-border payments, "multilateral interchange fees" (EU Regulation 260/2012)
969: 554: 221: 430: 252: 248: 77: 73: 883:"European PSD2 legislation puts privacy under pressure. Privacy First demands PSD2 opt-out register" 329: 989: 726: 48: 606:"Competent authorities for the authorisation and supervision of payment institutions (Article 20)" 373: 255:
initiative to harmonise the main non-cash payment instruments across the Euro area (by end 2010)
56: 220:
PSD2 went into full effect on 14 September 2019, but due to delays in the implementation, the
799: 109: 285:
13 January 2018: Directive 2007/64/EC is repealed and replaced by Directive (EU) 2015/2366
241:
to make Europe "the world's most competitive and dynamic knowledge-driven economy" by 2010
8: 821:"strong customer authentication (SCA) Enforcement Date : Stripe: Help & Support" 730: 672: 584: 550: 513: 60: 842:"EBA publishes an Opinion on the elements of strong customer authentication under PSD2" 911: 759: 129: 112:
directive, certain elements allowed for different options by individual countries.
297:
29 November 2021: FCA publishes changes to 90-day reauthentication rules in the UK
76:
is a self-regulatory initiative by the European banking sector represented in the
865:"The Implications and Requirements of PSD2 open banking for Programme Managers" 52: 958: 928: 238: 81: 383: 378: 361: 184: 85: 40: 938: 482:"Authorised Payment Institution | Payments | Licensing & Compliance" 244:
December 2001: regulation EC 2560/2001 on cross-border payments in Euro
97: 949:
Opinion on the elements of strong customer authentication under PSD2
166:
PSD exemptions related to payment activities left users unprotected.
270:
1 November 2009: deadline for transposition in national legislation
262: 261:
December 2005: proposal for PSD by DG Internal Market Commissioner
89: 177: 543:"Directive on Payment Services (PSD) – Member States' options" 507:"The Payment Services Directive – What it means for Consumers" 279:
July 2013: report on implementation of PSD and its two updates
217:
495 defines a standard for implementing these requirements.
756:"Electronic payment services: Council adopts updated rules" 187:, and make cross-border European payment services safer. 101: 45:
European Commission (Directorate General Internal Market)
796:"Capitalizing on the potential benefits of open banking" 360:
Privacy First, a privacy organisation, criticised the
721: 719: 258:
2001–2004: consultation period and preparation of PSD
209:
An important element of PSD2 is the requirement for
944:
Payment services (PSD 2) - Directive (EU) 2015/2366
716: 460:"Payment services (PSD 1) - Directive 2007/64/EC" 956: 692: 690: 782:"COMMISSION DELEGATED REGULATION (EU) 2018/389" 750: 748: 687: 251:created by the banking industry, driving the 425: 423: 178:Revised Directive on Payment Services (PSD2) 844:(Press release). European Banking Authority 745: 420: 348:Learn how and when to remove this message 641: 639: 637: 267:25 December 2007: PSD entered into force 213:on the majority of electronic payments. 202:secure open standards of communication. 985:European Union financial market policy 957: 929:Text of the Payment Services Directive 435:Official Journal of the European Union 951:European Banking Authority, June 2019 862: 634: 454: 452: 319:This section may contain information 123:The PSD contained two main sections: 118: 305: 224:allowed for a time extension of the 934:European Union PSD official website 301: 157: 13: 904: 863:Jones, Brendan (23 October 2018). 449: 409:, vol. OJ L, 23 December 2015 21:Revised Payment Services Directive 14: 1001: 922: 649:. Eur-lex.europa.eu. 24 July 2013 47:to regulate payment services and 310: 183:mobile payments such as through 74:SEPA (Single Euro Payments Area) 33:Payment Services Directive (PSD) 875: 856: 834: 813: 788: 774: 702:The Financial Conduct Authority 661: 598: 569: 535: 499: 474: 396: 228:(SCA) until 31 December 2020. 226:strong customer authentication 211:strong customer authentication 1: 965:Banking in the European Union 389: 199:Council of the European Union 231: 7: 367: 67: 10: 1006: 222:European Banking Authority 144: 980:European Union directives 939:European Payments Council 325:to the article's subject. 253:Single Euro Payments Area 249:European Payments Council 197:On 16 November 2015, the 78:European Payments Council 49:payment service providers 29:Directive (EU) 2015/2366 374:Late Payments Directive 57:European Economic Area 43:, administered by the 462:. European Commission 323:important or relevant 110:maximum harmonisation 31:, which replaced the 330:improve this section 100:XML message format, 37:Directive 2007/64/EC 975:European Commission 887:www.privacyfirst.eu 784:. 27 November 2017. 731:European Commission 673:European Commission 622:on 27 February 2015 585:European Commission 557:on 27 February 2015 551:European Commission 514:European Commission 61:consumer protection 970:Digital currencies 762:. 16 November 2015 704:. 29 November 2021 577:"Payment Services" 190:Then-Commissioner 119:Technical overview 916:978-3-8487-0709-6 760:Council of the EU 758:(Press release). 729:(Press release). 700:(Press release). 675:. 28 October 2021 671:(Press release). 437:. 5 December 2007 358: 357: 350: 130:E-Money Directive 997: 898: 897: 895: 893: 879: 873: 872: 860: 854: 853: 851: 849: 838: 832: 831: 829: 827: 817: 811: 810: 808: 806: 792: 786: 785: 778: 772: 771: 769: 767: 752: 743: 742: 740: 738: 733:. 8 October 2015 723: 714: 713: 711: 709: 694: 685: 684: 682: 680: 665: 659: 658: 656: 654: 643: 632: 631: 629: 627: 621: 615:. Archived from 610: 602: 596: 595: 593: 591: 573: 567: 566: 564: 562: 553:. Archived from 539: 533: 532: 530: 528: 522: 516:. Archived from 511: 503: 497: 496: 494: 492: 478: 472: 471: 469: 467: 456: 447: 446: 444: 442: 427: 418: 417: 416: 414: 400: 353: 346: 342: 339: 333: 314: 313: 306: 302:Privacy concerns 206:for the future. 158:Remaining issues 1005: 1004: 1000: 999: 998: 996: 995: 994: 990:Payment systems 955: 954: 925: 907: 905:Further reading 902: 901: 891: 889: 881: 880: 876: 861: 857: 847: 845: 840: 839: 835: 825: 823: 819: 818: 814: 804: 802: 794: 793: 789: 780: 779: 775: 765: 763: 754: 753: 746: 736: 734: 725: 724: 717: 707: 705: 696: 695: 688: 678: 676: 667: 666: 662: 652: 650: 645: 644: 635: 625: 623: 619: 608: 604: 603: 599: 589: 587: 575: 574: 570: 560: 558: 541: 540: 536: 526: 524: 520: 509: 505: 504: 500: 490: 488: 480: 479: 475: 465: 463: 458: 457: 450: 440: 438: 429: 428: 421: 412: 410: 402: 401: 397: 392: 370: 354: 343: 337: 334: 327: 315: 311: 304: 234: 180: 160: 147: 121: 82:credit transfer 70: 51:throughout the 17: 12: 11: 5: 1003: 993: 992: 987: 982: 977: 972: 967: 953: 952: 946: 941: 936: 931: 924: 923:External links 921: 920: 919: 906: 903: 900: 899: 874: 855: 833: 812: 787: 773: 744: 715: 686: 660: 633: 597: 568: 534: 523:on 30 May 2013 498: 473: 448: 419: 394: 393: 391: 388: 387: 386: 381: 376: 369: 366: 356: 355: 318: 316: 309: 303: 300: 299: 298: 295: 292: 289: 286: 283: 280: 277: 274: 271: 268: 265: 259: 256: 245: 242: 233: 230: 179: 176: 175: 174: 170: 167: 164: 159: 156: 146: 143: 139: 138: 134: 120: 117: 69: 66: 53:European Union 15: 9: 6: 4: 3: 2: 1002: 991: 988: 986: 983: 981: 978: 976: 973: 971: 968: 966: 963: 962: 960: 950: 947: 945: 942: 940: 937: 935: 932: 930: 927: 926: 917: 913: 909: 908: 888: 884: 878: 870: 866: 859: 843: 837: 822: 816: 801: 797: 791: 783: 777: 761: 757: 751: 749: 732: 728: 722: 720: 703: 699: 693: 691: 674: 670: 664: 648: 642: 640: 638: 618: 614: 607: 601: 586: 582: 578: 572: 556: 552: 548: 544: 538: 519: 515: 508: 502: 487: 483: 477: 461: 455: 453: 436: 432: 426: 424: 408: 407: 399: 395: 385: 382: 380: 377: 375: 372: 371: 365: 363: 352: 349: 341: 331: 326: 324: 317: 308: 307: 296: 293: 290: 287: 284: 281: 278: 275: 272: 269: 266: 264: 260: 257: 254: 250: 246: 243: 240: 239:Lisbon Agenda 236: 235: 229: 227: 223: 218: 214: 212: 207: 203: 200: 195: 193: 192:Jonathan Hill 188: 186: 171: 168: 165: 162: 161: 155: 151: 142: 135: 131: 126: 125: 124: 116: 113: 111: 105: 103: 99: 95: 91: 87: 83: 79: 75: 65: 62: 58: 54: 50: 46: 42: 38: 34: 30: 26: 22: 890:. Retrieved 886: 877: 868: 858: 848:21 September 846:. Retrieved 836: 826:21 September 824:. Retrieved 815: 805:21 September 803:. Retrieved 790: 776: 764:. Retrieved 735:. Retrieved 706:. Retrieved 677:. Retrieved 663: 651:. Retrieved 624:. Retrieved 617:the original 613:EC.Europa.eu 612: 600: 588:. Retrieved 581:EC.Europa.eu 580: 571: 559:. Retrieved 555:the original 547:EC.Europa.eu 546: 537: 525:. Retrieved 518:the original 501: 489:. Retrieved 485: 476: 464:. Retrieved 439:. Retrieved 434: 411:, retrieved 404: 398: 384:Open Finance 379:Open banking 362:open banking 359: 344: 335: 328:Please help 320: 237:March 2000: 219: 215: 208: 204: 196: 189: 185:open banking 181: 152: 148: 140: 122: 114: 106: 86:direct debit 71: 41:EU Directive 36: 32: 28: 24: 20: 18: 16:EU Directive 766:16 November 653:27 February 626:27 February 590:13 February 561:27 February 466:13 February 959:Categories 918:. (German) 708:1 February 679:1 February 406:relevance) 390:References 232:Key dates 98:ISO 20022 55:(EU) and 869:Finextra 800:McKinsey 527:20 March 441:2 August 368:See also 338:May 2020 263:McCreevy 68:Overview 39:) is an 413:12 July 145:Updates 914:  892:26 May 491:26 May 486:BCC UK 247:2002: 737:4 May 620:(PDF) 609:(PDF) 521:(PDF) 510:(PDF) 912:ISBN 894:2020 850:2019 828:2019 807:2019 768:2015 739:2016 710:2021 681:2021 655:2015 628:2015 592:2017 563:2015 529:2014 493:2020 468:2017 443:2014 415:2020 321:not 94:IBAN 72:The 25:PSD2 19:The 102:EMV 90:BIC 961:: 885:. 867:. 798:. 747:^ 718:^ 689:^ 636:^ 611:. 583:. 579:. 549:. 545:. 512:. 484:. 451:^ 433:. 422:^ 96:, 92:, 88:, 35:, 27:, 896:. 871:. 852:. 830:. 809:. 770:. 741:. 712:. 683:. 657:. 630:. 594:. 565:. 531:. 495:. 470:. 445:. 351:) 345:( 340:) 336:( 332:. 84:/ 23:(

Index

EU Directive
European Commission (Directorate General Internal Market)
payment service providers
European Union
European Economic Area
consumer protection
SEPA (Single Euro Payments Area)
European Payments Council
credit transfer
direct debit
BIC
IBAN
ISO 20022
EMV
maximum harmonisation
E-Money Directive
open banking
Jonathan Hill
Council of the European Union
strong customer authentication
European Banking Authority
strong customer authentication
Lisbon Agenda
European Payments Council
Single Euro Payments Area
McCreevy
important or relevant
improve this section
Learn how and when to remove this message
open banking

Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.